Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/19/ACAA576B5133A4CFBCE092A7A5C09BCB64D3C7F8.mft
File:                     ACAA576B5133A4CFBCE092A7A5C09BCB64D3C7F8.mft (raw, json)
Hash identifier:          IMHevbHq4hCH4pvJasRl5q45BrX5O0GSibHX1VdMK7k=
Subject key identifier:   A9:8F:1F:34:56:C9:70:56:57:5D:A0:D6:C5:BE:3F:0F:50:63:29:50
Authority key identifier: AC:AA:57:6B:51:33:A4:CF:BC:E0:92:A7:A5:C0:9B:CB:64:D3:C7:F8
Certificate issuer:       /CN=acaa576b5133a4cfbce092a7a5c09bcb64d3c7f8
Certificate serial:       3A44C0BDA09739D3DE922BA444FA43CE67D0521A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKpXa1EzpM-84JKnpcCby2TTx_g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/19/ACAA576B5133A4CFBCE092A7A5C09BCB64D3C7F8.mft
Manifest number:          02A0
Signing time:             Sun 30 Jun 2024 03:04:06 +0000
Manifest this update:     Sun 30 Jun 2024 02:59:06 +0000
Manifest next update:     Mon 01 Jul 2024 04:49:06 +0000
Files and hashes:         1: ACAA576B5133A4CFBCE092A7A5C09BCB64D3C7F8.crl (hash: t68vrKBIujVyvPPH6YYdmDhI3QO7cnZ/rnUSsIdCf3Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:44:c0:bd:a0:97:39:d3:de:92:2b:a4:44:fa:43:ce:67:d0:52:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acaa576b5133a4cfbce092a7a5c09bcb64d3c7f8
        Validity
            Not Before: Jun 30 02:59:06 2024 GMT
            Not After : Jul  1 04:49:06 2024 GMT
        Subject: CN=A98F1F3456C97056575DA0D6C5BE3F0F50632950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:40:3f:2e:95:d9:65:b8:14:2d:a4:86:1a:
                    d2:7e:1b:46:5a:fb:cb:8c:09:67:ea:a2:2e:97:67:
                    26:18:6a:57:d9:f7:c4:28:e0:f0:72:03:85:2e:ef:
                    47:69:66:c9:ab:69:6b:77:d6:a7:8f:2b:6f:48:2a:
                    7b:89:98:7a:9f:e6:0e:49:25:af:9d:20:a3:2d:8b:
                    5a:dd:ed:4a:c7:1d:6f:c6:4f:9e:90:b1:d0:73:e1:
                    61:e2:6a:96:a6:30:1c:98:c2:e4:f5:6a:80:27:e1:
                    c7:04:1d:a9:9a:29:23:5c:1d:49:2f:d8:e9:15:27:
                    c1:88:0a:5e:09:9c:9a:65:6b:63:80:45:b3:93:a5:
                    6e:03:ec:e7:f0:3c:9a:69:8a:3f:d3:a6:2c:3c:47:
                    dc:9c:0a:6d:ff:c4:09:de:31:b5:5f:a3:2e:f4:14:
                    38:94:6d:bb:dc:62:1e:46:a9:d7:21:c5:fb:93:2b:
                    d9:39:35:8d:0d:81:27:f1:da:28:5a:04:04:4e:bc:
                    42:2e:b5:0e:d9:ad:17:d8:fe:e6:88:00:94:80:ac:
                    29:43:6c:dc:cc:5e:b8:e5:b8:14:e4:51:0d:bc:eb:
                    d2:06:a2:ee:2e:a6:16:ab:57:e0:2b:8b:c6:6c:62:
                    c9:42:29:30:35:d8:76:35:f2:09:ce:88:e4:23:8f:
                    d1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8F:1F:34:56:C9:70:56:57:5D:A0:D6:C5:BE:3F:0F:50:63:29:50
            X509v3 Authority Key Identifier:
                keyid:AC:AA:57:6B:51:33:A4:CF:BC:E0:92:A7:A5:C0:9B:CB:64:D3:C7:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/19/ACAA576B5133A4CFBCE092A7A5C09BCB64D3C7F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKpXa1EzpM-84JKnpcCby2TTx_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/19/ACAA576B5133A4CFBCE092A7A5C09BCB64D3C7F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b5:62:c8:3b:2d:3f:cf:df:f6:87:09:21:b1:aa:13:cc:33:
         1b:c1:7a:fa:61:8e:5e:4a:bb:32:c9:e9:0a:ae:29:41:56:1d:
         27:df:59:e3:3e:b1:16:4c:37:22:56:be:a0:55:51:d1:d0:74:
         88:a6:f0:9d:15:1c:71:68:d8:0a:e2:98:97:92:db:17:69:d6:
         4f:e7:e1:2a:24:97:85:3b:6c:f5:21:3b:17:6c:82:f2:d9:7b:
         10:1f:b5:d4:d2:98:33:d0:f7:28:62:d7:b9:08:d0:cc:68:be:
         01:21:4b:3c:22:b5:cb:e5:8e:a3:da:32:52:7b:6e:ab:ad:0e:
         f7:eb:82:f7:49:a9:47:e3:8d:8e:46:74:3d:30:0c:14:5b:33:
         25:55:cb:5c:7c:01:a2:a2:cb:0d:f8:70:b1:81:05:5f:18:68:
         fd:3e:ff:ae:cf:84:65:20:4d:fe:6e:30:d1:c3:4e:33:e8:f8:
         ba:a2:4f:58:12:0c:44:cf:99:77:ea:9b:1f:09:0c:28:26:ed:
         e3:6d:b3:98:29:5f:65:ea:02:5b:04:53:d3:37:5f:d0:0b:67:
         aa:82:48:74:c2:44:74:95:bf:42:ef:27:11:45:43:93:ae:d8:
         75:ea:03:a2:83:6b:c0:f2:f1:89:6d:4f:ff:f2:e3:69:ae:fa:
         03:a1:f2:c8
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUOkTAvaCXOdPekiukRPpDzmfQUhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWNhYTU3NmI1MTMzYTRjZmJjZTA5MmE3YTVjMDliY2I2
NGQzYzdmODAeFw0yNDA2MzAwMjU5MDZaFw0yNDA3MDEwNDQ5MDZaMDMxMTAvBgNV
BAMTKEE5OEYxRjM0NTZDOTcwNTY1NzVEQTBENkM1QkUzRjBGNTA2MzI5NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmEA/LpXZZbgULaSGGtJ+G0Za
+8uMCWfqoi6XZyYYalfZ98Qo4PByA4Uu70dpZsmraWt31qePK29IKnuJmHqf5g5J
Ja+dIKMti1rd7UrHHW/GT56QsdBz4WHiapamMByYwuT1aoAn4ccEHamaKSNcHUkv
2OkVJ8GICl4JnJpla2OARbOTpW4D7OfwPJppij/Tpiw8R9ycCm3/xAneMbVfoy70
FDiUbbvcYh5GqdchxfuTK9k5NY0NgSfx2ihaBAROvEIutQ7ZrRfY/uaIAJSArClD
bNzMXrjluBTkUQ2869IGou4upharV+Ari8ZsYslCKTA12HY18gnOiOQjj9FNAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUqY8fNFbJcFZXXaDWxb4/D1BjKVAwHwYDVR0j
BBgwFoAUrKpXa1EzpM+84JKnpcCby2TTx/gwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzdiNTc1ZWE3LTc4NmYtNGIyZC1hNDU1LTc5ZDdmYzQz
ZWNlZS8xOS9BQ0FBNTc2QjUxMzNBNENGQkNFMDkyQTdBNUMwOUJDQjY0RDNDN0Y4
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcktwWGExRXpwTS04NEpLbnBjQ2J5
MlRUeF9nLmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YjU3NWVh
Ny03ODZmLTRiMmQtYTQ1NS03OWQ3ZmM0M2VjZWUvMTkvQUNBQTU3NkI1MTMzQTRD
RkJDRTA5MkE3QTVDMDlCQ0I2NEQzQzdGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK+1Ysg7LT/P3/aH
CSGxqhPMMxvBevphjl5KuzLJ6QquKUFWHSffWeM+sRZMNyJWvqBVUdHQdIim8J0V
HHFo2ArimJeS2xdp1k/n4Sokl4U7bPUhOxdsgvLZexAftdTSmDPQ9yhi17kI0Mxo
vgEhSzwitcvljqPaMlJ7bqutDvfrgvdJqUfjjY5GdD0wDBRbMyVVy1x8AaKiyw34
cLGBBV8YaP0+/67PhGUgTf5uMNHDTjPo+LqiT1gSDETPmXfqmx8JDCgm7eNts5gp
X2XqAlsEU9M3X9ALZ6qCSHTCRHSVv0LvJxFFQ5Ou2HXqA6KDa8Dy8YltT//y42mu
+gOh8sg=
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:54:16 2025 by rpki-client